diablomedia/zendframework1-translate

Release historycaution

The package has 10 releases over about 8 years, with one release in the last 12 months and a median interval of about 316 days. This indicates a slow but still active maintenance pattern.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful sign of currently limited maintenance activity. The release in January and repository push in April provide some recent evidence, but do not remove the concern.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and response. Dependabot scanning provides some compensation, but not a documented security process.

Workflow auditcaution

All 5 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue where actor context may be spoofable. There are no untrusted checkouts or script injections, but the workflow hygiene still warrants caution.